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Top Stories 

• The Los Angeles County Board of Supervisors declared a state of emergency December 15 
due to the release of up to 1,200 tons of methane into the atmosphere from a leaking 
Southern California Gas Co. well site. - Los Angeles Daily News (See item 1) 

• Three men from Florida, New Jersey, and Maryland were charged December 15 with a 
computer hacking and identity theft scheme in which they stole the personal information of 
millions of people and gained over $2 million in illegal profits. - U.S. Attorney’s Office, 
District of New Jersey (See item 27) 

• United Kingdom police arrested a suspect December 15 believed to be linked to a data 
breach at VTech Holdings Ltd that compromised more than 6 million children profiles and 
more than 4.9 million parent profiles. - Associated Press (See item 30) 

• Eighteen suspects were arrested in connection to a $2 million gift card scheme by stealing 
merchandise from retail stores, returning it for store credit, and reselling the cards in 
Deltona at half their values December 14. - WFTV 9 Orlando (See item 32) 
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Energy Sector 



1. December 16, Los Angeles Daily News - (California) LA County declares state of 
emergency over Porter Ranch gas leak. The Los Angeles County Board of 
Supervisors declared a state of emergency December 15 due to the release of up to 
1,200 tons of methane into the atmosphere from a leaking Southern California Gas Co. 
well site located above Porter Ranch over a period of 50 days. The declaration will 
allow for more in-depth air monitoring and help with efforts to cap the well. 

Source: http://www.dailynews.com/environment-and-nature/20151215/la-county- 
declares- state-of-emergency-over-porter-ranch- gas-leak 

2. December 14, Fresno Bee - (California) Hanford man pleads guilty to stealing over 
$100,000 from auto center at Navy base. A Hanford man pleaded guilty December 14 
to stealing approximately $111,900 while working at the auto service center at the U.S. 
Naval Air Station in Lemoore where he accepted cash payment from customers 
purchasing gasoline, entered a lower amount for the transaction, and pocketed the 
difference from 2011 - 2013. The man also changed the dates or amount of gasoline 
delivered to the center. 

Source: http://www.fresnobee.com/news/local/crime/article49805155.html 

3. December 14, Lincoln Journal Star - (International) TransCanada facing penalties 
for alleged unsafe pipeline operation. The U.S. Pipeline and Hazardous Materials 
Safety Administration notified Canada-based TransCanada of four pipeline safety 
violations after an October 2012 inspection found corrosion and small holes in a section 
of its Keystone pipeline. Proposed penalties total $187,200. 

Source: http://joumalstar.com/news/state-and-regional/nebraska/transcanada-facing- 
penalties-for-alleged-unsafe-pipeline-operation/article 4cbl622c-ale4-5240-949a- 
8b40e 1751 2ec .html 



Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

4. December 15, Chattanooga Times Free Press - (Tennessee) TVA completes refueling 
of Sequoyah Nuclear Plant. Officials from Tennessee Valley Authority reported that 
the Sequoyah Nuclear Power Plant’s Unit 2 nuclear reactor completed its planned 
refueling and maintenance outage December 15. The outage replaced 80 of the unit’s 
193 fuel assemblies and inspected the reactor vessels to confirm design requirements 
that may mitigate future outages. 

Source: 

http://www.timesfreepress.com/news/business/aroundregion/storv/2015/dec/15/tva- 
completes-refuelin g-seq uoyah-nuclear- plant/3405 93/ 
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Critical Manufacturing Sector 



5. December 15, U.S. Department of Labor - (Illinois) Illinois metal plating company 
exposes workers to noise, toxic metal, other hazards at Cicero plant. The 
Occupational Safety and Health Administration cited Illinois-based Electronic Plating 
Co., with 1 willful, 8 repeated, 8 serious, and 1 other-than-serious safety and health 
violations following a December 10 inspection which found that the company failed to 
protect workers from metal, machinery, and live electrical hazards at its Cicero 
manufacturing facility. Proposed fines total $157,080. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29262 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

6. December 15, U.S. Attorney’s Office, District of New Jersey - (New Jersey) 

Monmouth County, New Jersey stock promoter admits role in $33 million 
microcap stock manipulation scheme. A Holmdel, New Jersey man pleaded guilty 
December 15 to his role in a $33 million microcap stock manipulation scheme that used 
a “pump and dump” tactic to artificially inflate the stock prices of 4 publically traded 
companies, known collectively as the Target Companies, through manipulative trading 
and other fraudulent means. The man worked with other co-conspirators and gained 
approximately $13 million from the scheme. 

Source: https://www.fbi.gov/newark/press-releases/2015/monrnouth-countv-new- 
iersev-stock-promoter-admits-role-in-33-million-microcap-stock-manipulation-scheme 

7. December 15, U.S. Securities and Exchange Commission - (Connecticut) SEC 
announces fraud charges against investment adviser. The U.S. Securities and 
Exchange Commission announced fraud charges December 15 against Connecticut- 
based Atlantic Asset Management LLC (AAM) for investing more than $43 million of 
client funds into illiquid bonds issued by BFG Socially Responsible Investing Ltd., a 
partial owner of AAM, without disclosing to clients that their sale would generate 
private placement fees for a broker-dealer affiliated to the company. 

Source: http://www.sec.gov/news/pressrelease/2015-280.html 

8. December 14, Reuters - (National) New York lawyer convicted of Maxim magazine 
deal fraud. A New York lawyer was found guilty December 14 for his involvement in 
a scheme to help fraudulently secure $3 1 million in financing from investors in order to 
help a co-conspirator purchase Maxim magazine. The pair provided fake bank account 
statements and emails to lenders in order to borrow $8 million, and attempted to secure 
an additional $20 million for the purchase of the magazine. 

Source: http://www.reuters.com/article/us-usa-crime-maximmagazine- 
idU S KBN0TX2F7 20151214 
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Transportation Systems Sector 

9. December 16, CNN - (Tennessee) Southwest flight rolls off taxiway in Nashville. 

The Federal Aviation Administration (FAA) reported that Southwest Airlines 31 
traveling from Houston to Nashville rolled off the taxiway upon landing at Nashville 
International Airport December 15 and got stuck while taxiing to its gate. Eight 
passengers were taken to area hospitals for minor injuries and the FAA is investigating 
the incident. 

Source: http://www.cnn.com/2015/12/15/us/nashville-southwest-flight/index.html 

10. December 16, Associated Press - (Colorado) Storm drops up to 2 feet on Colorado; 
500 flights canceled. Denver International Airport in Longmont was forced to cancel 
approximately 500 flights after a winter storm brought 24 inches of snow December 15. 
The storm closed schools in both Colorado and Utah and several highways. 

Source: http://www.whdh.com/storv/30752835/storm-drops-up-to-2-feet-on-colorado- 
500-flights-canceled 

11. December 15, WTMJ 4 Milwaukee - (Wisconsin) 2 killed after being ejected from 
vehicle in Racine County. Highway 75 in Racine County was closed for 5 hours 
December 15 while officials investigated a fatal accident that killed 2 people. 

Source: http://www.tmi4.com/news/local-news/highwav-75-closed-in-racine-county 

12. December 15, Spokane Spokesman-Review - (Washington) Alaska Airlines flight 
makes emergency landing in Spokane. Alaska Airlines Flight 2372 travelling from 
Seattle to Spokane was forced to make an emergency landing in Spokane before its 
schedule arrival time December 15 after smoke filled the plane’s cabin. The incident 
shut down the main runway at Spokane International Airport for approximately one 
hour, delaying two inbound flights. 

Source: http://www.spokesman.com/stories/2015/dec/15/alaska-airlines-flight-makes- 
emergency-landing-in-/ 

For another story, see item 3 

Food and Agriculture Sector 

13. December 15, U.S. Food and Drug Administration - (National) Sun Noodle - New 
Jersey - issues allergy alert on undeclared egg in Tonkotsu Ramen. Sun Noodle 
issued a recall December 14 for its Tonkotsu Ramen products due to misbranding and 
undeclared egg following a routine inspection at the company’s facility in New Jersey. 
Products were sold to Asian food distributors in Georgia, Illinois, New Jersey, and New 
York and in several retail stores. 

Source: http ://w w w .fda. gov/Safety/Recalls/ucm4774 1 3 .htm 

14. December 15, Upper Midwest Forum News Service - (Minnesota) Minnesota lifts 
bird flu quarantines. The Minnesota Board of Animal Health lifted all quarantines on 
State poultry farms affected by the avian influenza December 15 after farmers took 
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several steps to ensure that any flu virus was eliminated. 

Source: http://www.wctrib.com/news/state/3904578-minnesota-lifts-bird-flu- 
quarantines 

15. December 15, U.S. Department of Labor - (New Jersey) Coca-Cola distribution 
warehouse in Monmouth Junction, New Jersey, cited for repeat and serious safety 
and health workplace violations. The U.S. Occupational Safety and Health 
Administration cited Coca-Cola Refreshments USA Inc.’s distribution facility in 
Monmouth Junction, New Jersey, for 4 repeat and 2 serious safety and health violations 
December 1 1 following an investigation that found obstructed and unidentified exits as 
well as improperly stored compressed gas cylinders. Proposed fines total $61,600. 
Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29259 

Water and Wastewater Systems Sector 

16. December 15, ABC News - (Michigan) Flint, Michigan issues State of Emergency 
after threat of lead poisoning in children. The mayor of Flint, Michigan declared a 
state of emergency December 14 after officials found elevated levels of lead in its 
drinking water supply following the city change in water source from the Flint River to 
the Detroit Water and Sewage Department October 16. 

Source: http://abcnews.go.com/Health/flint-michigan-issues-state-emergencv-threat- 
lead-poisoning/story?id=35774029 

17. December 15, Portland Oregonian - (Oregon) Blocked sewer line sends 28,000 
gallons of raw sewage into Fanno Creek Tributary. Officials reported that a blocked 
sewage line sent 28,000 gallons of raw sewage into a tributary of Fanno Creek for 
about 5 hours December 14 after the sewage was found flowing from a manhole. 
Officials advised nearby citizens to avoid Fanno Creek until December 16 due to 
increased bacteria in the water. 

Source: 

http://www.oregonlive.com/portland/index.ssf/2015/12/blocked sewer line sends 280 
00.html 



Healthcare and Public Health Sector 

18. December 16, Associated Press - (Arizona) Company: 2 dead in medical helicopter 
crash near Phoenix. Two out of three people aboard an Air Methods medical 
helicopter were killed when the aircraft crashed for unknown circumstances in Pinal 
County December 15. Authorities are investigating the incident. 

Source: http://www.msn.com/en-us/news/us/company-2-dead-in-medical-helicopter- 
crash-near-phoenix/ar-BBnClr4 

Government Facilities Sector 
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19. December 16, WABC 7 New York City - (New York) Mace blamed for fumes that 



forced West Babylon School evacuation, hospitalizations. Classes at West Babylon 
High School on Long Island were expected to resume December 16 after the school 
was evacuated and classes were dismissed December 15 following the illness of 35 
students and faculty members caused by fumes when 2 students sprayed mace in the 
hallway. 

Source: http://abc7ny.com/education/long-island-high-school-evacuated-after-dozens- 
overcome-bv-fumes;-will-reopen-for- Wednesday/ 1123765/ 

20. December 16, CNN - (California) Los Angeles schools set to reopen after threat. Los 
Angeles city officials reported that schools in the district will reopen December 16 after 
more than 1,500 school sites were closed December 15 due to a threat that mentioned 
the use of explosive devices, assault rifles, and pistols toward students in schools. 
Source: http://www.cnn.com/2015/12/15/us/los-angeles-schools-closed-threat/ 

21. December 16, Missoula Missoulian - (Montana) Human error behind the release of 
sensitive Hellgate High information. The Missoula County Public Schools 
superintendent reported that human error contributed to the inadvertent December 4 
release of academic, medical, disciplinary, and criminal information for about 1,100 
Hellgate High School students to 28 parents. An investigation determined that the 
students’ information was unintentionally merged with a document attached to an email 
containing an agenda and notes. 

Source: http://missoulian.com/news/local/thane-hurnan-error-caused-hellgate-high- 
data-leak/article 30aa38f2- 1 67b-50e8-83f2-76bdeb9a2 1 66.html 



For additional stories, see items 1 and 16 

Emergency Services Sector 

22. December 15, Grand Forks Herald - (North Dakota) Outbreak at Cass County Jail 
in Fargo sickens more than 100. Officials are investigating the source of an outbreak 
that sickened 1 10 inmates at the Cass County Jail in Fargo December 15. Most of the 
sickened inmates were treated on site and a county kitchen inspector was brought in to 
inspect the jail’s kitchen. 

Source: http://www.grandforksherald.com/news/crime-and-courts/3904584-outbreak- 
cass-county-iail-fargo-sickens-more-100 

Information Technology Sector 

23. December 16, Softpedia - (International) FireEye security devices provide attackers 
with backdoor into corporate networks. Two security researchers discovered several 
FireEye security products had two zero-day flaws, such as the RCE and privilege 
escalation bug that can execute malicious code disguised as the highly privileged 
Malware Input Processor (mip) user and gain administrative privileges on the infected 
device. FireEye released patches addressing the vulnerabilities. 

Source: http://news.softpedia.com/news/fireeye-securitv-devices-provide-attackers- 
with-backdoor-into-corporate-networks-497 7 02 . shtml 
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24. December 16, SecurityWeek - (International) Mozilla patches critical flaws with 
release of Firefox 43. Mozilla released its new Firefox 43 web browser that patches 21 
security flaws including cross-site reading attacks, use-after-free vulnerabilities, and 
privilege escalation issues related to WebExtension APIs, among other patches, as well 
as several feature improvements, including a 64-bit version for Microsoft Windows. 
Source: http://www.securitvweek.com/mozilla-patches-critical-flaws-release-firefox-43 

25. December 16, SecurityWeek - (International) Critical DoS flaw patched in BIND. 

The Internet Systems Consortium (ISC) released updates to its open source software, 
BIND that patches three vulnerabilities including a remotely exploitable denial-of- 
service (Dos) issue that can trigger a REQUIRE assertion in db.c, causing the server to 
close and deny service to clients, as well as a socket error that can cause the server to 
exit when encountering an INSIST assertion failure in the “resolver.c” library. The 
latest updates also fixes an Open SSL vulnerability connected to the BN_mod_exp 
function that could produce issues on x86_64 systems. 

Source: http://www.securitvweek.com/critical-dos-flaw-patched-bind 

26. December 16, Help Net Security - (International) Asian company is the newest APT 
threat. A researcher from CloudSek CTO discovered the group, dubbed Santa APT 
was targeting international software companies and individuals to exploit confidential 
information via a desktop malware that disguises itself on the targets computer, collects 
files, and sends the files back to the attacker’s Command & Control (C&C) server, and 
through a second malware that targets Microsoft Android and Apple iOS devices. 
Source: http://www.net-security.org/malware news.php?id=3180 

27. December 15, U.S. Attorney’s Office, District of New Jersey - (New Jersey) Three 
men arrested in hacking and spamming scheme. A U.S. Attorney official reported 
December 15 that three men from Florida, New Jersey, and Maryland were charged 
with conspiracy to commit fraud and activities in connection to computers, and 
conspiracy to commit wire fraud after the trio allegedly compromised the personally 
identifiable information (PII) of millions of several different corporate employees and 
generated more than $2 million in illegal profits by creating a computer program to 
distribute disguised spam emails and used proxy servers and botnets to conceal the 
origin of the emails while collecting login credentials of employees, personal 
information, and confidential business information. 

Source: https://www.fbi.gov/newark/press-releases/2015/three-men-arrested-in- 
hacking-and-spamming-scheme 

28. December 15, IDG News Service - (International) TeslaCrypt Ransomware attacks 
are increasing. Security researchers from Symantec reported that the file-encrypting 
ransomware program, dubbed TeslaCrypt has been targeting computer games and 
related software, increasing its infection rate from 200 a day to 1,800. The ransomware 
infects a system via email attachments with the words “invoice,” “doc,” or “info” that 
contains heavily obfuscated JavaScript code designed to evade antivirus detention and 
download the ransomware program. 

Source: http://www.computerworld.com/article/3015454/securitv/teslacrypt- 
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ransomware-attacks-are-increasing.html#tk.rss security 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

29. December 16, Newark Star-Ledger - (New Jersey) Early morning 3-alarm fire 
displaces 34 residents in Jersey City. Officials reported that 34 residents were 
displaced from a Jersey City apartment complex after a 3-alarm fire began on the upper 
floor of the complex and spread to 3 adjacent buildings December 16. The cause of the 
blaze is under investigation and no injuries were reported. 

Source: 

http://www.ni.com/hudson/index.ssf/2015/12/early morning fire leaves 30 displaced 
in jersey c.html 

30. December 15, Associated Press - (International) British police arrest Vtech hacking 
suspect. Police in the United Kingdom arrested a suspect December 15 reportedly 
believed to be linked to a November 30 data breach at VTech Holdings Ltd, a company 
that sells electronic toys, that compromised more than 6 million children profiles and 
more than 4.9 million parent profiles including names, email addresses, Internet 
Protocol (IP) addresses, passwords, and mailing addresses, among other information. 
The suspect stated he targeted VTech Holdings Ltd to expose the company’s security 
flaws and raise awareness for security practices, with no intention to sell the stolen data 
for profit. 

Source: http://www.denverpost.com/business/ci 29258377/british-police-arrest-vtech- 
hacking-suspect 

31. December 15, CNET - (National) Target back on naughty list with another security 
vulnerability. Researchers from Avast discovered a flaw in Target’s mobile 
application that can allow attackers unauthorized access to customers’ addresses, phone 
numbers, and other personal information from wish lists created with the mobile 
application December 15. The vulnerability was found while researchers were 
examining the security and privacy of various mobile buying applications, as well as 
viewing which permission levels were granted to users. 

Source: http://www.cnet.com/news/target-back-on-naughtv-list-with-another-security- 
vulnerability/ 

32. December 14, WFTV 9 Orlando- (Florida) ‘Operation Plastic Paradise’ nets 18 
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arrests in $2 million gift card scheme. Authorities in Volusia County announced 
December 14 that 18 suspects were arrested in connection to a $2 million gift card 
scheme involving 2 store owners, 4 employees, and 12 customers who stole 
merchandise from retail stores, returned it for store credit gift cards, and resold the 
cards to cash-for-gift-card businesses in Deltona and Daytona Beach at half their 
values. Investigators determined that 2 stores in particular bought 16,870 cards in an 8- 
month period resulting in profits of $100,000 per month. 

Source: http://www.wftv.com/news/news/local/operation-plastic-paradise-nets-18- 
arrests-2-milli/npjmt/ 

For additional stories, see items 2 and 27 

Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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